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CLAIMS 

What is claimed is: 



1 1 . A machine readable media, comprising: 

2 a writeable area of the media; 

3 a read only area of the media; 

4 a content stored on the writeable area of the media; 

5 a first media validation data containing an encrypted preselected value and 

6 being stored on the writeable area; and, 

7 a second media validation data equal to the first media validation data and 

8 being stored on the read only area. 

1 2. The media of claim 1, further comprising: 

2 a circuit to calculate a message authentication code over the first media 

3 validation data using a shared session key to be established between the media and a 

4 device authorized to access the content. 

1 3. The media of claim 1 is a digital versatile disc (DVD). 
14. A device comprising: 

2 an input/output apparatus to access a media; and, 

3 a processor communicatively coupled with the input/output apparatus, the 

4 processor being configured to 

5 read a first media validation data from a writeable area of the media, 

6 set a first device validation data equal to the first media validation data, 

7 read a second media validation data from a read only area of the media, 

8 set a second device validation data equal to the second media 

9 validation data, 

I o compare the first device validation data and the second device 

I I validation data, and 

12 deny authorization to access content stored on the media if the first 

1 3 device validation data and the second device validation data are unequal. 
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1 5 . The device of claim 4, wherein the processor is further configured to decrypt 

2 one of the first device validation data and the second device validation data and to 

3 deny authorization to access the content if a result of the decryption is unequal to a 

4 preselected value. 

1 6. The device of claim 4, wherein the processor is further configured to: 

2 establish a shared session key with the media, 

3 read a first media message authentication code from the media, 

4 set a first device message authentication code equal to the first media message 

5 authentication code, 

6 calculate a second device message authentication code over the first media 

7 validation data using the shared session key, 

8 compare the first device message authentication code and the second device 

9 message authentication code, and 

10 deny authorization to access a content stored on the media if the first device 

1 1 message authentication code and the second device message authentication code are 

12 unequal. 

1 7. The device of claim 4 is a digital versatile disc (DVD) player. 

1 8. A data protection system, comprising: 

2 a media including (i) a writeable area that stores a first media validation data 

3 containing an encrypted preselected value and a content, (ii) a read only area of the 

4 media that stores a second media validation data equal to the first media validation 

5 data. 

6 a processor communicatively coupled with the media, the processor being 

7 configured to read the first media validation data, set a first device validation data 

8 equal to the first media validation data, read the second media validation data, set a 

9 second device validation data equal to the second media validation data, compare the 

1 0 first device validation data and the second device validation data, and deny 

1 1 authorization to access the content if the first device validation data and the second 

12 device validation data are unequal. 

1 9. The data protection system of claim 8, further comprising: 

13 



042390.P9906 



2 a media circuit to calculate a media message authentication code over the 

3 second media validation data using a shared session key to be established when the 

4 processor attempts to access the content. 

1 10. The data protection system of claim 8, wherein the processor is further 

2 configured to 

3 establish the shared session key with the media, 

4 read the media message authentication code from the media, 

5 set a first device message authentication code equal to the media 

6 message authentication code, 

7 calculate a second device message authentication code over the first 

8 device validation data using the shared session key, 

9 compare the first and the second device message authentication codes 

10 and 

1 1 deny authorization to access the content if the first and the second 

12 device message authentication codes are unequal. 

1 11. The data protection system of claim 8, wherein the reader is a digital versatile 

2 disc (DVD) player. 

1 12. A method, comprising: 

2 preselecting a value; 

3 encrypting the preselected value; 

4 setting a first media validation data equal to the encrypted preselected value; 

5 setting a second media validation data equal to the encrytpted preselected 

6 value; 

7 storing the first media validation data on a writeable area of a media; and, 

8 storing the second media validation data on a read only area of the media to 

9 protect a content stored on the media. 

1 13. The method of claim 12, further comprising: 
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2 configuring a media processor to calculate a media message authentication 

3 code over the first media validation data using a shared session key to be established 

4 when a media reader attempts to access the content. 

1 14. The method of claim 12, further comprising: 

2 configuring a media reader to read the first media validation data; 

3 setting a first device validation data equal to the first media validation data; 

4 configuring the media reader to read the second media validation data; 

5 setting a second device validation data equal to the second media validation 

6 data; 

7 configuring the media reader to compare the first device validation data and 

8 the second device validation data; and, 

9 configuring the media reader to deny authorization to access the content if the 
10 first device validation data and the second device validation data are unequal. 

1 15. The method of claim 14, further comprising: 

2 configuring the media reader to decrypt both the first device validation data 

3 and the second device validation data; and, 

4 configuring the media reader to deny authorization to access the content if a 

5 result of the decryption is unequal to the preselected value. 

1 16. The method of claim 12, wherein the media is a digital versatile disc (DVD). 

1 17. A machine readable medium containing instructions which, when executed by 

2 an apparatus causes the apparatus to perform operations, comprising: 

3 setting a first validation data equal to an encrypted preselected value; 

4 setting a second validation data equal to the encrypted preselected value; 

5 storing the first validation data on a writeable area of a media; and, 

6 storing the second validation data on a read only area of the media. 

1 18. The machine readable medium of claim 17, wherein the instructions, when 

2 executed, further cause the apparatus to perform operations comprising: 
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3 configuring a media processor to calculate a media message authentication 

4 code over the first media validation data using a shared session key to be established 

5 when a media reader attempts to access the content. 

1 19. The machine readable medium of claim 17 is a digital versatile disc (DVD). 

1 20. A machine readable medium containing instructions which, when executed by 

2 an apparatus, causes the apparatus to perform operations comprising: 

3 configuring a media reader to read a first media validation data; 

4 setting a first device validation data equal to the first media validation data; 

5 configuring the media reader to read a second media validation data; 

6 setting a second device validation data equal to the second media validation 

7 data; 

8 configuring the media reader to compare the first device validation data and 

9 the second device validation data; and, 

10 configuring the media reader to deny authorization to access the content if the 

1 1 first device validation data and the second device validation data are unequal. 

1 21. The machine readable medium of claim 20, wherein the instructions, when 

2 executed further cause the apparatus to perform operations comprising: 

3 configuring the media reader to decrypt both the first device validation data 

4 and the second device validation data; and, 

5 configuring the media reader to deny authorization to access the content if a 

6 result of the decryption is unequal to the preselected value. 

1 22. The machine readable medium of claim 20, the media reader is a digital 

2 versatile disk (DVD) player. 

1 23. A machine readable media, comprising: 

2 a writeable area of the media; 

3 a read only area of the media; 

4 a content stored on the writeable area of the media; and, 

5 a first media validation data containing an encrypted preselected value and 

6 being stored on the read only area. 
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1 24. The machine readable media of claim 23, further comprising: 

2 a second media validation data equal to the first media validation data and 

3 being stored on the writeable area. 

1 25. The media of claim 23, further comprising: 

2 a circuit to calculate a media message authentication code over the first media 

3 validation data using a shared session key to be established between the media and a 

4 device authorized to access the content. 
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